ISC2 member Akhil Mittal, CISSP, CCSP reflects on his CISSP certification journey and discusses the significant value he has derived from being a certified cybersecurity professional.

Akhil Mittal, CISSP, CCSPMy journey into cybersecurity was sparked by a strong interest in technology and a solid educational foundation in computer science. After earning my engineering degree, I began my career during a time of rapid internet evolution and the increasing need for robust security measures. These early years were characterized by a desire to protect information and systems from emerging threats.

A pivotal moment in my career occurred while I was managing a client’s penetration testing and cloud security program: my client director introduced me to the CISSP certification. This conversation sparked my interest in acquiring the certification, and I spent approximately one week exploring various training options before dedicating myself to pursuing it. Over the following six months, I devoted myself to studying, managing the demands of my job alongside that study.

This phase was both insightful and challenging, since the extensive CISSP curriculum requires the candidate to delve deeply into various cybersecurity domains. This process not only broadened my knowledge but also facilitated my understanding and integration of diverse aspects of cybersecurity in a cohesive manner. Successfully passing the CISSP exam was a significant achievement, solidifying my dedication to the field and laying a strong foundation for my future endeavors.

The Impact of the CISSP Certification Process

The CISSP signifies a rigorous and comprehensive evaluation of one's knowledge within the field. It tests your mindset, knowledge of concepts, capacity for accurately understanding questions, and your skill at selecting the best answers. Consequently, the CISSP is widely regarded as a badge of honor: a testament to an individual’s expertise, dedication, and commitment to safeguarding digital assets in an increasingly complex threat landscape.

However, displaying the CISSP certification on a LinkedIn profile also goes beyond mere achievement; it embodies a dedication to cybersecurity excellence, often becoming an integral part of one's professional identity. This is because achieving CISSP certification entails more than passing an exam; it requires a profound grasp of cybersecurity principles, practices, and their practical applications in real-world scenarios.

CISSP holders are not only adept at identifying and mitigating risks, but they are also skilled in seamlessly integrating security measures into business operations, thereby ensuring the protection of critical information assets.

Professional Development, Networking, Influence and Mentorship

ISC2 membership offers unparalleled opportunities for essential professional development and networking. Indeed, CISSP professionals are required to engage in robust professional development and networking to stay ahead in the dynamic cybersecurity landscape. Access to a global community of cybersecurity professionals and thought leaders has enriched my knowledge base and provided valuable insights into emerging trends and technologies. ISC2’s continuing education programs, webinars, and conferences have kept me at the forefront of cybersecurity advancements, enhancing my ability to address evolving threats effectively.

As a CISSP, I’ve been invited to participate in ISC2’s three-day CISSP Group Review workshop, which convenes industry experts to review and refine exam content, shaping the future of ISC2 certifications and ensuring they maintain their relevance in the ever-evolving cybersecurity landscape. I’ve also been able to contribute to ISC2’s Content Advisory Panel, collaborating with colleagues to evaluate and enhance certification technical content and its impact on advancing cybersecurity knowledge and standards industry-wide.

CISSP certification is also synonymous with mentorship in the cybersecurity community. Over the years, several individuals have approached me to mentor them as they embarked on their own CISSP journeys. Guiding them through the certification process has been my privilege, as they achieve this pivotal career milestone for themselves.

A Fulfilling Journey

CISSP certification has been instrumental in developing and refining security practices throughout my career. From conducting security maturity assessments to implementing proactive defense strategies against evolving cyber threats, CISSP's comprehensive knowledge framework has empowered me to drive significant advancements in organizational security postures.

Currently, as a Senior Manager at Synopsys, my responsibilities encompass expanding anchored accounts, nurturing client relationships, and overseeing project delivery. My focus is on application security, and I lead a team of professionals in delivering strategic solutions that help customers build and maintain secure software. This role involves direct engagement in penetration testing, threat modeling, architecture reviews, DevSecOps, cloud security, and managed security testing services.

Reflecting on my career, I’m grateful for the opportunities to contribute to the cybersecurity field and witness its evolution. The CISSP certification has been instrumental in my journey, providing a solid foundation for continuous learning and professional growth. I remain committed to advancing security practices and mentoring the next generation of cybersecurity leaders.

And my own, personal advice to CISSP aspirants? “Don’t aim to knock the ball out of the park. Aim for singles. Take your time, understand each topic thoroughly, and strive to conceptually relate different domains together. Don't rush, but also don't delay. Find a balanced pace that works for you. It's a marathon, not a sprint.”

If you are just starting out: my very best wishes for your CISSP journey!

Akhil Mittal, CISSP, CCSP, has over 19 years of experience in cybersecurity across various sectors including finance, healthcare, and technology. He has held management roles, with responsibility for leading security assessments, developing strategic security programs, and driving client engagements. His cybersecurity work spans application security, cloud security, AI and DevSecOps.